NOTE: If your organization signed a BurstCloud Business or BurstCloud Enterprise Agreement with BurstCloud, that Agreement may have modified the privacy policy below. Please contact your organization's Admin for details.

BurstCloud Privacy Policy

Thanks for using BurstCloud! Here we describe how we collect, use, and handle your personal data when you use our websites, software, and services ("Services"). For more information and details, please see our Frequently Asked Questions page.

What and Why

We collect and use the following information to provide, improve, protect, and promote our Services. Account information. We collect, and associate with your account, the information you provide to us when you do things such as sign up for your account, upgrade to a paid plan, and set up two-factor authentication (like your name, email address, phone number, payment info, and physical address).

Your Stuff. Our Services are designed as a simple and personalized way for you to store your files, documents, photos, comments, messages, and so on ("Your Stuff"), collaborate with others, and work across multiple devices and services. To make that possible, we store, process, and transmit Your Stuff as well as information related to it. This related information includes your profile information that makes it easier to collaborate and share Your Stuff with others, as well as things like the size of the file, the time it was uploaded, collaborators, and usage activity.

Contacts. You may choose to give us access to your contacts to make it easy for you to do things like share and collaborate on Your Stuff, send messages, and invite others to use the Services. If you do, we'll store those contacts on our servers for you to use.

Usage information. We collect information related to how you use the Services, including actions you take in your account (like sharing, editing, viewing, creating and moving files or folders). We use this information to provide, improve, and promote our Services, and protect BurstCloud users. Please refer to our FAQ for more information about how we use this usage information.

Device information. We also collect information from and about the devices you use to access the Services. This includes things like IP addresses, the type of browser and device you use, the web page you visited before coming to our sites, and identifiers associated with your devices. Your devices (depending on their settings) may also transmit location information to the Services. For example, we use device information to detect abuse and identify and troubleshoot bugs.

Cookies and other technologies. We use technologies like cookies and pixel tags to provide, improve, protect, and promote our Services. For example, cookies help us with things like remembering your username for your next visit, understanding how you are interacting with our Services, and improving them based on that information. You can set your browser to not accept cookies, but this may limit your ability to use the Services. If our systems receive a DNT:1 signal from your browser, we'll respond to that signal as outlined here. We may also use third-party service providers that set cookies and similar technologies to promote BurstCloud services. You can learn more about how cookies and similar technologies work, as well as how to opt out of the use of them for advertising purposes, here.

Marketing. We give users the option to use some of our Services free of charge. These free Services are made possible by the fact that some users upgrade to one of our paid Services. If you register for our Services, we will, from time to time, send you information about upgrades when permissible. Users who receive these marketing materials can opt out at any time. If you don't want to receive a particular type of marketing material from us, click the 'unsubscribe' link in the corresponding emails, or update your preferences in the Notifications section of your personal account.

We sometimes contact people who don't have a BurstCloud account. For recipients in the EU, we or a third party will obtain consent before reaching out. If you receive an email and no longer wish to be contacted by BurstCloud, you can unsubscribe and remove yourself from our contact list via the message itself.

Bases for processing your data. We collect and use the personal data described above in order to provide you with the Services in a reliable and secure manner. We also collect and use personal data for our legitimate business needs. To the extent we process your personal data for other purposes, we ask for your consent in advance or require that our partners obtain such consent. For more information on the lawful bases for processing your data, please see our FAQ.

For more details on the categories of personal information that are included in the information above, please see our FAQ.

We collect and use the following information to provide, improve, protect, and promote our Services. Account information. We collect, and associate with your account, the information you provide to us when you do things such as sign up for your account, upgrade to a paid plan, and set up two-factor authentication (like your name, email address, phone number, payment info, and physical address).

Your Stuff. Our Services are designed as a simple and personalized way for you to store your files, documents, photos, comments, messages, and so on ("Your Stuff"), collaborate with others, and work across multiple devices and services. To make that possible, we store, process, and transmit Your Stuff as well as information related to it. This related information includes your profile information that makes it easier to collaborate and share Your Stuff with others, as well as things like the size of the file, the time it was uploaded, collaborators, and usage activity.

Contacts. You may choose to give us access to your contacts to make it easy for you to do things like share and collaborate on Your Stuff, send messages, and invite others to use the Services. If you do, we'll store those contacts on our servers for you to use.

Usage information. We collect information related to how you use the Services, including actions you take in your account (like sharing, editing, viewing, creating and moving files or folders). We use this information to provide, improve, and promote our Services, and protect BurstCloud users. Please refer to our FAQ for more information about how we use this usage information.

Device information. We also collect information from and about the devices you use to access the Services. This includes things like IP addresses, the type of browser and device you use, the web page you visited before coming to our sites, and identifiers associated with your devices. Your devices (depending on their settings) may also transmit location information to the Services. For example, we use device information to detect abuse and identify and troubleshoot bugs.

Cookies and other technologies. We use technologies like cookies and pixel tags to provide, improve, protect, and promote our Services. For example, cookies help us with things like remembering your username for your next visit, understanding how you are interacting with our Services, and improving them based on that information. You can set your browser to not accept cookies, but this may limit your ability to use the Services. If our systems receive a DNT:1 signal from your browser, we'll respond to that signal as outlined here. We may also use third-party service providers that set cookies and similar technologies to promote BurstCloud services. You can learn more about how cookies and similar technologies work, as well as how to opt out of the use of them for advertising purposes, here.

Marketing. We give users the option to use some of our Services free of charge. These free Services are made possible by the fact that some users upgrade to one of our paid Services. If you register for our Services, we will, from time to time, send you information about upgrades when permissible. Users who receive these marketing materials can opt out at any time. If you don't want to receive a particular type of marketing material from us, click the 'unsubscribe' link in the corresponding emails, or update your preferences in the Notifications section of your personal account.

We sometimes contact people who don't have a BurstCloud account. For recipients in the EU, we or a third party will obtain consent before reaching out. If you receive an email and no longer wish to be contacted by BurstCloud, you can unsubscribe and remove yourself from our contact list via the message itself.

Bases for processing your data. We collect and use the personal data described above in order to provide you with the Services in a reliable and secure manner. We also collect and use personal data for our legitimate business needs. To the extent we process your personal data for other purposes, we ask for your consent in advance or require that our partners obtain such consent. For more information on the lawful bases for processing your data, please see our FAQ.

For more details on the categories of personal information that are included in the information above, please see our FAQ.

With Whom

We may share information as discussed below, but we won't sell it to advertisers or other third parties.

Others working for and with BurstCloud. BurstCloud uses certain trusted third parties (for example, providers of customer support and IT services) for the business purposes of helping us provide, improve, protect, and promote our Services. These third parties will access your information to perform tasks on our behalf, and we'll remain responsible for their handling of your information per our instructions. For a list of trusted third parties that we use to process your personal data and more details on the categories of personal information that we've disclosed, please see our FAQ.

Other BurstCloud Companies. BurstCloud shares infrastructure, systems, and technology with other BurstCloud Companies to provide, improve, protect, and promote BurstCloud Company Services. We process your information across the BurstCloud Companies for these purposes, as permitted by applicable law and in accordance with their terms and policies. For more information on BurstCloud Companies, BurstCloud Company Services, and how your data is used, please see our FAQ.

Other users. Our Services display information like your name, profile picture, device, email address, and usage information to other users you collaborate or choose to share with. When you register your BurstCloud account with an email address on a domain owned by your employer or organization, we may help collaborators and administrators find you and your team by making some of your basic information-like your name, team name, profile picture, and email address-visible to other users on the same domain. This helps you sync up with teams you can join and helps other users share files and folders with you.

Certain features let you make additional information available to others.

Location information

When you use a location-enabled BurstCloud service, we may collect and process information about your actual location, like GPS signals sent by a mobile device. We may also use various technologies to determine location, such as sensor data from your device that may, for example, provide information on nearby Wi-Fi access points and cell towers.

Other applications. You can choose to connect your BurstCloud account with third-party services for example, via BurstCloud APIs. By doing so, you're enabling BurstCloud and those third parties to exchange information about you and data in your account so that BurstCloud and those third parties can provide, improve, protect, and promote their services. Please remember that third parties' use of your information will be governed by their own privacy policies and terms of service.

Business Team Admins. If you are a user of a BurstCloud Business team (collectively, "BurstCloud Business Team"), your administrator may have the ability to access and control your BurstCloud Business Team account. Please refer to your organization's internal policies if you have questions about this. If you aren't a BurstCloud Business Team user but interact with a BurstCloud Business Team user (for example, by joining a shared folder or accessing stuff shared by that user), members of that organization may be able to view the name, email address, profile picture, and IP address that was associated with your account at the time of that interaction. If you share Your stuff with a BurstCloud team user, the administrator of the team account may have the ability to access and edit what you share.

Law and Order and the Public Interest. We may disclose your information to third parties if we determine that such disclosure is reasonably necessary to: (a) comply with any applicable law, regulation, legal process, or appropriate government request; (b) protect any person from death or serious bodily injury; (c) prevent fraud or abuse of BurstCloud or our users; (d) protect BurstCloud's rights, property, safety, or interest; or (e) perform a task carried out in the public interest.

Stewardship of your data is critical to us and a responsibility that we embrace. We believe that your data should receive the same legal protections regardless of whether it's stored on our Services or on your home computer's hard drive. We'll abide by the following Government Request Principles when receiving, scrutinizing, and responding to government requests (including national security requests) for your data:

How

User Controls. You can access, amend, download, and delete your personal information by logging into your BurstCloud account and going to your account settings page. Learn more here about managing your account information generally, or click here to learn how to change your profile information.

Retention. When you sign up for an account with us, we'll retain information you store on our Services for as long as your account exists or as long as we need it to provide you the Services. If you delete your account, we'll initiate deletion of this information after 30 days. Learn more here. But please note: (1) there might be some latency in deleting this information from our servers and back-up storage; and (2) we may retain this information if necessary to comply with our legal obligations, resolve disputes, or enforce our agreements.

Where

Around the world. To provide you with the Services, we may store, process, and transmit data in the United States and locations around the world including those outside your country. Data may also be stored locally on the devices you use to access the Services.

Your Control and Access of Your Data

You have control over your personal data and how it's collected, used, and shared. For example, you can:

If you would like to submit a data access request, request that your personal data be deleted, or object to the processing of your personal data, please email us at [email protected]. For more information on how to control and access your personal data, please see our FAQ.

Changes

If we're involved in a reorganization, merger, acquisition, or sale of our assets, your data may be transferred as part of that deal. We'll notify you (for example, via a message to the email address associated with your account) of any such deal and outline your choices in that event.

We may revise this Privacy Policy from time to time, and will post the most current version on our website. If a revision meaningfully reduces your rights, we will notify you.

Contact

Have questions or concerns about BurstCloud, our Services, and privacy? Contact our Data Protection Officer at [email protected]. If they can't answer your question, you have the right to contact your local data protection supervisory authority.